[MD5: A5E645 1918DC 63AAAE A3B3CD C22272]

tonger2003

sbbdms

江民只杀掉1个....

红心王子

瑞星全部飘过

rasis

Tonger2003.zip
  [0] Archive type: RAR
  --> a.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> s168.exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
  --> vip1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> vip.exe
      [DETECTION] Is the Trojan horse TR/Agent.7384
  --> xx.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen

andylau

PANDA
File checked        : c:\malware\Tonger2003464563.zip[xx.exe]


   Suspicious file


ik
c:\malware\Tonger2003464563.zip:\a.exe - Signature 'Trojan.Win32.Agent.ajx' found
c:\malware\Tonger2003464563.zip:\s168.exe - Signature 'Virus.Win32.AutoRun.bk' found
c:\malware\Tonger2003464563.zip:\vip1.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
c:\malware\Tonger2003464563.zip:\vip.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
c:\malware\Tonger2003464563.zip:\xx.exe - Signature 'Backdoor.Win32.Agent.ahj' found
c:\malware\Tonger2003464563.zip

        6 Files scanned
          (1 Archiv with 5 files)
        5 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.766



+ -- ArcaVir 2007 -- + version: 1.0.5
+ Bases date:  23:14  01-08-2007
OK c:\malware\Tonger2003464563.zip
OK c:\malware\Tonger2003464563.zip<RAR>:a.exe
VIR: Variant:Trojan.Hupigon.R c:\malware\Tonger2003464563.zip<RAR>:a.exe<PECompact2>:a.exe
ACTION OK LEAVE
OK c:\malware\Tonger2003464563.zip<RAR>:a.exe<PECompact2>:a.exe<DLLRES>:res0.exe
VIR: Trojan.Hupigon.R c:\malware\Tonger2003464563.zip<RAR>:a.exe<PECompact2>:a.exe<DLLRES>:res1.exe
ACTION OK LEAVE
VIR: Trojan.Agent.Ajx c:\malware\Tonger2003464563.zip<RAR>:a.exe<PECompact2>:a.exe<DLLRES>:res2.exe
ACTION OK LEAVE
OK c:\malware\Tonger2003464563.zip<RAR>:s168.exe
OK c:\malware\Tonger2003464563.zip<RAR>:s168.exe<UPX>:s168.exe
OK c:\malware\Tonger2003464563.zip<RAR>:s168.exe<UPX>:s168.exe<DLLRES>:DATAINFO0.exe
OK c:\malware\Tonger2003464563.zip<RAR>:s168.exe<UPX>:s168.exe<DLLRES>:DATAINFO0.exe<UPX>:DATAINFO0.exe
OK c:\malware\Tonger2003464563.zip<RAR>:vip1.exe
OK c:\malware\Tonger2003464563.zip<RAR>:vip.exe
OK c:\malware\Tonger2003464563.zip<RAR>:vip.exe<UPack>:vip.exe
VIR: Downloader.Small.Ege c:\malware\Tonger2003464563.zip<RAR>:xx.exe
ACTION OK LEAVE
Scan summary:
------------------------
Scanned:
Files             :  7
Directories       :  1
Archives          :  3
Files in archives :  13
Embedded files    :  4
Embedded objects  :  0
Excluded files    :  0
All               :  14

Found:
Infected          :  4
Cured             :  0
Deleted           :  0
Renamed           :  0

[ 本帖最后由 andylau 于 2007-8-2 14:33 编辑 ]

残缺的唯美

红伞杀5个

dragonkf

。。。。。。。。。。。。。

xxwpk007

已检测到: 病毒 Heur.Invader (变种)        文件: G:\样本\样本\Tonger2003\vip.exe//PE_Patch//UPack
已检测到: 木马程序 Trojan-Downloader.Win32.Small.ege        文件: G:\样本\样本\Tonger2003\xx.exe

tracydk

ArcaMicroScan - Scanning report [2007.08.02 16:28:41]
Base date : 2007.08.01 23:14:21





[Scanning : F:\virus]


F:\virus\Tonger2003.zip<RAR>:a.exe<PECompact2>:a.exe <- Variant:Trojan.Hupigon.R : Cleaning -> Delete
F:\virus\Tonger2003.zip<RAR>:xx.exe <- Downloader.Small.Ege : Cleaning -> Delete



Scanned objects : 11

Infected objects : 2

scottxzt

数字鹰全部拦截.